Privacy Policy

Public beta. Qlykr is being tested in public. Nothing is sold yet: no payment is taken, and the 4K download is free during the beta. Nothing here is final: features, limits and these texts can change at any time, and a video is not guaranteed.

This text is a draft for the beta and has not been reviewed by a lawyer.

Who is responsible

Malik Khuzai, Schengenstraße 91, 91052 Erlangen, Germany, hello@qlykr.com. See the imprint.

What we process and why

Your request. When you ask for a video we store the domain you entered, your email address, the format you chose, the time of the request, the status of your video and your confirmation of the Terms. We need this to build the video, to show it to you and to send you the link (Art. 6(1)(b) GDPR).

Your website. To build the video an automated system reads the public pages of the domain you entered: text, colours, fonts, logos and images.

Script and photos you add. If you add your own script or photos, we store them privately and use them only to build your video and the round of changes. Please add photos of people only if they agree.

Your feedback. If you ask for a change, we store your text and use it to build the video again (Art. 6(1)(b) GDPR).

How the video is built. The video is built automatically by an AI agent that runs in containers on our own computer in Germany. The agent uses Claude, a language model by Anthropic, through its API. The status page shows the progress with preview frames. It can be opened by anyone who has its link, which contains a secret code. The result is checked by an automated checker. This processing has no legal effect on you and is not a decision about you in the sense of Art. 22 GDPR.

The 4K step. When you press "Download 4K, €49", a payment form from Stripe opens in test mode. Card details you enter are processed by Stripe directly in the embedded field; they never reach us, and no payment is made. We record only whether the step was opened, started or completed, linked to your request. We use this to measure whether people would pay for the video (Art. 6(1)(f) GDPR; our legitimate interest is to test demand before we sell anything). The 4K download is then unlocked free of charge.

Abuse protection. To enforce the daily limit and the limits per website and per email address, we store a hash of your IP address, not the address itself, in a daily counter (Art. 6(1)(f) GDPR; our legitimate interest is to protect the free service from abuse). The counters are kept only as long as needed for this purpose.

Email. We send you a confirmation and a message when your video is ready. We do not send marketing email.

Server logs. Our hosting provider records technical data such as IP address, time and requested page to deliver the site and keep it secure (Art. 6(1)(f) GDPR).

No tracking. The site uses no analytics and no tracking pixels. It sets only cookies that are strictly necessary. If access to the site is protected by a password for a time, one cookie remembers that you may use the site; it contains no personal data. When the payment form opens, Stripe loads its own script and may set cookies needed for fraud prevention; see Stripe's privacy policy.

Who receives data

Vercel Inc., USA hosts this site and stores requests, scripts, photos and videos (Vercel Blob). Resend (Plus Five Five, Inc., USA) delivers our emails. Anthropic PBC, USA provides the language model that processes the public content of your website and the script and photos you add while your video is built. Your email address is not sent to it. Under Anthropic's commercial terms, data sent through the API is not used to train its models. Stripe Payments Europe, Ltd., Ireland provides the payment form in test mode and processes what you enter into it; Stripe may transfer data to Stripe, Inc. in the USA.

Data may be transferred to the USA. Such transfers are based on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses.

How long we keep it

Requests, scripts, photos and videos are kept until you ask us to delete them, and at the latest 12 months after the last activity on your request. To have your data deleted, write to hello@qlykr.com.

Your rights

You may ask for access, correction, deletion, restriction and a copy of your data, and you may object to processing based on our legitimate interest. Write to hello@qlykr.com. You may also complain to a data protection authority, for example the one where you live.